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Question: 1 


What provides a comparison of completed risk response actions with planned outcomes? 


A. Risk management strategy 
B. Risk improvement plan 

C. Risk progress report 

D. Risk response plan 


Answer: C 


Question: 2 


Which is a purpose of 'embedding and reviewing’ M_o_R? 


A. Maximizing the return on investment in risk management 

B. Assuring the appointment of risk owners 

C. Ensuring the availability of appropriate techniques used in the risk management process steps 
D. Reporting on the risk response plan’ 


Answer: A 


Question: 3 


Which is NOT a purpose of 'embedding and reviewing M_o_R’? 


A. Assessing the implementation of risk management 

B. Improving the risk culture of an organization 

C. Reviewing risk descriptions as a result of changes to the context 

D. Identifies the opportunities for updating existing risk management practices. 


Answer: C 


Question: 4 


Identify the missing words in the following sentence. In order to safeguard value-creating activities, [ 
? ] is used to build an effective response to threats. 
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A. corporate governance 

B. business continuity management 
C. programme management 

D. project management 


Answer: B 


Question: 5 


Which describes ‘residual’ risk exposure? 


A. Probability of a secondary risk occurring 

B. Effect on objectives if a risk occurs after implementing risk response actions 
C. Chance of a risk occurring before risk response actions commence 

D. Proximity of a risk before risk response actions are completed 


Answer: B 


Question: 6 


Which information from the risk register is used during the ‘assess - evaluate’ step to calculate the 
total risk exposure of an activity? 


A. Identified risks resulting from a risk response action 

B. Estimated likelihood of the risks occurring 

C. Exposure of the risks after completion of risk responses 
D. The timeframe in which the risks are likely to occur 


Answer: B 


Question: 7 


Which is a responsibility of a 'risk actionee'? 


A. Identify risks that might occur to activities in their department 
B. Develop strategies to improve the management of risk 

C. Manage all aspects of an assigned risk 

D. Perform a risk response action to respond to a particular risk 


Answer: D 


Question: 8 


Which is a purpose for an ‘M_o_R health check’? 


A. Review how well risk management practices have been embedded 
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B. Examine future developments that may affect an organization's level of exposure to risk 


C. Provide a snapshot of the current status of identified risks 


D. Identify individuals or groups of individuals that have an interest in an organizations planned 


activity 


Answer: A 


Question: 9 


Which describes the threat response option ‘accept the risk'? 


A. Perform an action to minimize the impact of the risk should it occur 

B. Carry out an action to make the uncertain situation certain 

C. Take no action except monitor the risk to ensure it remains tolerable 

D. Partake in a pain/gain contract with another party for the specified risk 


Answer: C 


Question: 10 


Which is identified by the use of the 'PESTLE' analysis technique? 


A. Stakeholders involved in an activity 

B. Roles and responsibilities of those involved in an activity 
C. Factors that may impact the activity 

D. Net effect of risks identified during an activity 


Answer: C 
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